
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
File: 34352e36382e34302e302f32322d3234203d3e20323733383637.roa (raw, json)
Hash identifier: e1NtVQBjIDJEWdn1nZKADYJyryiXszPluLuLIr2hK24=
Subject key identifier: DC:67:E4:1B:4C:84:17:80:2A:90:B2:30:BB:3D:57:62:41:09:82:60
Certificate issuer: /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial: 2F0D6C64BE79E04B737426FAED4FC715A3BD06B5
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
Signing time: Mon 02 Jun 2025 21:20:51 +0000
ROA not before: Mon 02 Jun 2025 21:15:51 +0000
ROA not after: Mon 01 Jun 2026 21:20:51 +0000
asID: 273867
IP address blocks: 45.68.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0d:6c:64:be:79:e0:4b:73:74:26:fa:ed:4f:c7:15:a3:bd:06:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Validity
Not Before: Jun 2 21:15:51 2025 GMT
Not After : Jun 1 21:20:51 2026 GMT
Subject: CN=DC67E41B4C8417802A90B230BB3D576241098260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:52:fb:95:82:88:31:20:72:cd:c2:77:b9:
4a:09:46:3e:29:ee:4c:97:c9:8a:71:36:52:a2:68:
a0:f2:f4:06:38:80:df:87:d5:fe:9a:fc:d9:5f:6a:
9a:f1:9a:64:b6:ca:7a:4a:97:05:ae:97:8a:67:f6:
5c:6c:79:ca:1b:01:e8:96:89:ad:52:40:f9:cf:a8:
35:0a:35:87:ec:34:03:5a:90:ce:66:e2:4b:21:b4:
c6:77:91:46:4d:7b:a8:33:89:2f:e6:f8:58:7c:80:
bf:96:d6:74:94:6d:dc:53:91:03:8e:7a:2d:b9:a5:
e3:91:f8:bb:f5:25:01:9a:af:7f:ab:72:9b:5e:5b:
19:49:44:4e:c2:77:30:71:60:11:cf:f3:50:a2:b3:
3f:4c:44:12:a8:df:03:2a:ae:2c:16:31:c2:6a:9f:
13:2d:1e:7e:4d:69:33:bb:e9:88:2f:8f:64:b9:18:
ba:eb:22:c7:05:79:9a:b5:c9:dc:d6:ab:25:c9:38:
36:0e:cf:bb:a3:6d:d2:ae:83:c7:76:39:d4:6f:b2:
55:60:51:73:cf:23:a1:d8:7a:c9:08:73:08:06:13:
c7:b2:6a:1a:05:b9:d5:4e:f9:0d:3a:a2:f5:ba:0c:
f4:69:0d:90:15:14:16:b9:33:53:f2:a9:dc:1b:6a:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:E4:1B:4C:84:17:80:2A:90:B2:30:BB:3D:57:62:41:09:82:60
X509v3 Authority Key Identifier:
keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:35:2c:d5:85:fa:ec:9d:0b:07:1c:89:a6:56:4d:87:09:21:
b3:5f:9c:4a:13:45:54:52:99:71:87:d5:b3:d0:12:50:92:0e:
44:30:fc:70:78:12:ef:27:da:58:6d:f4:bd:9b:79:c7:28:7e:
35:0a:8f:a4:5d:67:f8:35:2c:08:98:92:d7:7b:bf:f7:07:aa:
5c:04:8b:f8:e1:b2:3d:0d:51:ba:30:06:50:38:45:50:cb:d5:
6c:4f:49:d2:87:b0:0f:b1:d3:ba:b4:7e:dd:07:96:1a:d9:1d:
6c:47:06:b1:a1:37:ed:84:be:69:a5:4e:e7:cd:ab:a4:4c:9a:
e7:e4:a6:5c:f5:04:b9:7d:23:36:27:e2:dd:4e:3d:d8:57:15:
cc:07:c8:ac:f2:13:98:73:e3:80:c6:20:89:4e:43:86:89:4d:
38:c7:7c:50:4f:c5:67:57:79:e4:2d:ad:93:fe:c4:b9:1c:29:
93:f7:e5:13:11:ee:72:26:56:60:59:3e:d2:cc:41:ff:1e:ff:
14:19:9b:f2:99:e7:32:c9:0e:0e:e3:2a:e5:77:e9:1a:ec:f4:
2d:8a:f3:d8:1f:5a:d0:04:d2:ef:11:9c:d2:48:7d:b2:10:3e:
ea:17:0f:28:1f:86:71:69:d4:ad:d6:82:9e:76:b4:c4:36:4f:
16:1a:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:43:52 2025 by rpki-client